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Abstract. Constraint logic programming combines declarativity and ef- 
ficiency thanks to constraint solvers implemented for specific domains. 
Value withdrawal explanations have been efficiently used in several con- 
straints programming environments but there does not exist any formal- 
ization of them. This paper is an attempt to fill this lack. Furthermore, 
we hope that this theoretical tool could help to validate some program- 
ming environments. A value withdrawal explanation is a tree describing 
the withdrawal of a value during a domain reduction by local consis- 
tency notions and labeling. Domain reduction is formalized by a search 
tree using two kinds of operators: operators for local consistency notions 
and operators for labeling. These operators are defined by sets of rules. 
Proof trees are built with respect to these rules. For each removed value, 
there exists such a proof tree which is the withdrawal explanation of this 
value. 



1 Introduction 

Constraint logic programming is one of the most important computing paradigm 
of the last years. It combines declarativity and efficiency thanks to constraint 
solvers implemented for specific domains. Consequently the needs in program- 
ming environments is growing. But logic programming environments are not al- 
ways sufficient to deal with the constraint side of constraint logic programming. 
Value withdrawal explanations have been efficiently used in several constraints 
programming environments but there does not exist any formalization of them. 
This paper is an attempt to fill this lack. This work is supported by the french 
RNTL0 project OADymPPaC^ which aim is to provide constraint programming 
environments. 

A value withdrawal explanation is a tree describing the withdrawal of a value 
during a domain reduction. This description is done in the framework of domain 
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reduction of finite domains by notions of local consistency and labeling. A first 
work Q dealt with explanations in the framework of domain reduction by local 
consistency notions only. A value withdrawal explanation contains the whole 
information about a removal and may therefore be a useful tool for programming 
environments. Indeed it allows to perform: 

— failure analysis: a failure explanation being a set of value withdrawal expla- 
nations; 

— constraint retraction: explanations provides the values which have been with- 
drawn directly or indirectly by the constraint and then allow to easily repair 
the domains; 

— debugging: an explanation being a kind of declarative trace of a value with- 
drawal, it can be used to find an error from a symptom. 

The first and second item have been implemented in the PaLM system ||. PaLM 
is based on the constraint solver CHOCO || where labeling is replaced by the 
use of explanations. Note that the constraint retraction algorithm of PaLM has 
been proved correct thanks to our definition of explanations, and more gener- 
ally a large family of constraint retraction algorithms are also included in this 
framework. 

The main motivation of this work is not only to provide a common model for 
the partners of the OADymPPaC project but also to use explanations for the 
debugging of constraints programs. Nevertheless, the aim of this paper is not to 
describe the applications of value withdrawal explanations but to formally define 
this notion of explanation. 

The definition of a Constraint Satisfaction Problem is given in the preliminary 
section. In third and fourth sections a theoretical framework for the computation 
of solutions is described in sections [| and ^. A computation is viewed as a search 
tree where each branch is an iteration of operators. Finally, explanations are 
presented in the last section thanks to the definition of rules associated to these 
operators. 

2 Preliminaries 

Following 0, a Constraint Satisfaction Problem (CSP) is made of two parts: 
a syntactic part and a semantic part. The syntactic part is a finite set V of 
variables, a finite set C of constraints and a function var : C — > V{V), which 
associates a set related variables to each constraint. Indeed, a constraint may 
involve only a subset of V. 

For the semantic part, we need to introduce some preliminary concepts. We 
consider various families f = (/i)iez- Such a family is referred to by the function 
i i > fi or by the set {(i, fc) \ i€ I}. 

Each variable is associated to a set of possible values. Therefore, we consider 
a family (D x ) x ^v where each D x is a finite non empty set. 

We define the domain by D = Lbev^'i 2 '} x Ac)- This domain allows sim- 
ple and uniform definitions of (local consistency) operators on a power-set. For 
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domain reduction, we consider subsets d of D. Such a subset is called an envi- 
ronment. We denote by d\w the restriction of a set d C U to a set of variables 
W C V, that is, d| vk = € d | x 6 W}. Any d C D is actually a family 

{d x )xev with d^; C D x : for x € V, we define d x — {e £ | (x, e) 6 d} and call 
it the environment of x. 

Constraints are defined by their set of allowed tuples. A tuple t on W £ V 
is a particular environment such that each variable of W appears only once: 
t C D|vk and Vx £ W, 3e £ D Xl t\{ x } — {(x,e)}. For each c £ C,T C is & set of 
tuples on var(c), called the solutions of c. 

We can now formally define a CSP. 

Definition 1. A Constraint Satisfaction Problem (CSP) is defined by: 

— a finite set V of variables; 

— a finite set C of constraints; 

— a function var : C — > V(V); 

— the family {D x ) x ^y (the domains); 

— a family (T c ) c£ c (the constraints semantics). 

Note that a tuple t £ T c is equivalent to the family (ea;)xevar(c) an d that t is 
identified to {{x.e x ) \ x £ var(c)}. 

A user is interested in particular tuples (on V) which associate a value to 
each variable, such that all the constraints are satisfied. 

Definition 2. A tuple t on V is a solution of the CSP j/Vc £ C,t\ va r( c ) £ T c . 

Example 1. Conference problem 

Mike, Peter and Alan wants to give a talk on their work to each other during 
three half-days. Peter knows Alan's work and vice versa. There are four talks 
(and so four variables): Mike to Peter (MP), Peter to Mike (PM), Mike to Alan 
(MA) and Alan to Mike (AM). Note that Mike can not listen to Alan and Peter 
simultaneously (AM ^ PM). Mike wants to know the works of Peter and Alan 
before talking (MA > AM, MA > PM, MP > AM, MP > PM). 

This can be written in GNU-PROLOG j| (with a labeling on PM) by: 

conf ( AM , MP , PM , MA) :- 

f d_domain ( [MP , PM , MA , AM] ,1,3), 

MA #> AM, 

MA #> PM, 

MP #> AM, 

MP #> PM, 

AM #\= PM, 

fd_labeling(PM) . 

The values 1, 2, 3 corresponds to the first, second and third half-days. Note that 
the labeling on PM is sufficient to obtain the solutions. Without this labeling, 
the solver provides reduced domains only (no solution). 

This example will be continued all along the paper. □ 
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The aim of a solver is to provide one (or more) solution. In order to obtain 
them, two methods are interleaved: domain reduction thanks to local consistency 
notions and labeling. The first one is correct with respect to the solutions, that is 
it only removes values which cannot belong to any solution, whereas the second 
one is used to restrict the search space. 

Note that to do a labeling amounts to cut a problem in several sub-problems. 

In the next section, we do not consider the whole labeling (that is the passage 
from a problem to a set of sub-problems) but only the passage from a problem 
to one of its sub-problems. The whole labeling will be consider in section ^ with 
the well-known notion of search tree. 



3 Domain reduction mechanism 

In practice, operators are associated with the constraints and are applied with 
respect to a propagation queue. This method is interleaved with some restriction 
(due to labeling). In this section, this computation of a reduced environment is 
formalized thanks to a chaotic iteration of operators. The reduction operators 
can be of two types: operators associated with a constraint and a notion of local 
consistency, and operators associated with a restriction. The resulting environ- 
ment is described in terms of closure ensuring confluence. 

Domain reduction with respect to notions of consistency can be expressed in 
terms of operators. Such an operator computes a set of consistent values for a 
set of variables W out according to the environments of another set of variables 
W m . 

Definition 3. A local consistency operator of type (Wi„, W ou t), with Wi n , W ou t 
C V is a monotonia junction f : "P(1D>) — > ■p(D) such that: \fd C D, 

- f(d)\v\W out = ^\v\W av t> 

- f(d) = f(d\ Win ) 

Note that the first item ensures that the operator is only concerned by the 
variables W ou t- The second one ensures that this result only depends on the 
variable Wj„. 

These operators are associated with constraints of the CSP. So each operator 
must not remove solutions of its associated constraint (and of course of the CSP). 
These notions of correction are detailed in || . 

Example 2. In GNU-PROLOG, two local consistency operators are associated 
to the constraint MA #> PM: the operator which reduce the domain of MA with 
respect to PM and the one which reduce the domain of PM with respect to MA. 
□ 

From now on, we denote by L a set of local consistency operators (the set of 
local consistency operators associated with the constraints of the CSP). 

Domain reduction by notions of consistency alone is not always sufficient. 
The resulting environment is an approximation of the solutions (that is all the 



Value withdrawal explanations: a theoretical tool. . . 21 



solutions are included in this environment). This environment must be restricted 
(for example by the choice of a value for a variable). Of course, such a restric- 
tion (formalized by the application of a restriction operator) does not have the 
properties of correctness of a local consistency operator: the application of such 
an operator may remove solutions. But, in the next section, these operators will 
be considered as a set (corresponding to the whole labeling on a variable). In- 
tuitively, if we consider a labeling search tree, this section only deals with only 
one branch of this tree. 

In the same way local consistency operators have been defined, restriction 
operators are now introduced. 

Definition 4. A restriction operator on x £ V is a constant function f : 
V(B) ->-p(B) such that: Vd C B,f(d)\ v \ {x} = B\ V \ {x} . 

Example 3. The function / such that Vrf € D,/(d) = V\v\{pm} U {(PM, 1)} is 
a restriction operator. □ 

From now on we denote by R a set of restriction operators. 

These two kind of operators are successively applied to the environment. The 
environment is replaced by its intersection with the result of the application of 
the operator. We denote by F the set of operators L U R. 

Definition 5. The reduction operator associated with the operator f 6 F is the 
monotonic and contracting function d i— > df~\ f(d). 

A common fix-point of the reduction operators associated with F starting 
from an environment d is an environment d! C d such that V/ £ F,d' = d' PI 
f(d'), that is V/ S F,d' C f(d'). The greatest common fix-point is this greatest 
environment d. To be more precise: 

Definition 6. The downward closure of d by F is max{d' C O | d 1 C d A V/ G 
F,d! Qf(d')} and is denoted by CL [ (d,F). 

Note that CL j (d, 0) = d and CL j (d, F) C CL J. (d, F') if F' C F. 

In practice, the order of application of these operators is determined by a 
propagation queue. It is implemented to ensures to never forget any operator 
and to always reach the closure CL J, (d,F). From a theoretical point of view, 
this closure can also be computed by chaotic iterations introduced for this aim 
in |B| . The following definition is taken from Apt [|| . 

Definition 7. A run is an infinite sequence of operators of F , that is, a run 
associates with each i £ IN (i > 1) an element of F denoted by f . A run is 
fair if each f S F appears in it infinitely often, that is, V/ £ | / = f 1 } is 

infinite. 

The iteration of the set of operators F from the environment d C P with 
respect to an infinite sequence of operators of F : f 1 , f 2 , . . . is the infinite sequence 
dr, dr, d 2 , . . . inductively defined by: 
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1. d° = d; 

2. for each i £ IN, d l+1 = d l n p +l {d' L ). 

Its limit is Hig^d 1 . 

A chaotic iteration is an iteration with respect to a sequence of operators of 
F (with respect to F in short) where each f £ F appears infinitely often. 

Note that an iteration may start from a domain d which can be different 
from D. This is more general and convenient for a lot of applications (dynamic 
aspects of constraint programming for example). 

The next well-known result of confluence ensures that any chaotic iter- 
ation reaches the closure. Note that, since C is a well-founded ordering (i.e. D 
is a finite set), every iteration from d C D is stationary, that is, 3i £ IN,Vj > 
i,d? = d\ 

Lemma 1. The limit d F of every chaotic iteration of a set of operators F from 
d C ID) is the downward closure of d by F. 

Proof. Let d°, d 1 , d 2 , . . . be a chaotic iteration of F from d with respect to 
f\f 2 ,... 

[CL | (d, F) C d F ] For each i,CL[ (d, F) C <f, by induction: CL j (d, F) C 
d° = d. Assume CL j (d,F) C d\ CL j (d, F) C f+^CL J. (d,F)) C /^^d*) 
by monotonicity. Thus, CL J. (d, F) Crf'n / i+1 (d0 = d J+1 . 

[d F C CL | (d, F)] There exists k £ IN such that d F = d k because C is a 
well-founded ordering. The iteration is chaotic, hence d k is a common fix-point 
of the set of operators associated with F, thus d k C CL | (d, F) (the greatest 
common fix-point). 

In order to obtain a closure, it is not necessary to have a chaotic iteration. 
Indeed, since restriction operators are constant functions, they can be apply only 
once. 

Lemma 2. d LuR = CL | (CL | (d, R), L) 

Proof. d LuR = CL | (d, L U R) by lemma | and CL J. (d, L U iZ) = CL J. (CL | 
(d, i?), L) because operators of R are constant functions. 

As said above, we have considered in this section a computation in a single 
branch of a labeling search tree. This formalization is extended in the next 
section in order to take the whole search tree into account. 

4 Search tree 

A labeling on a variable can be viewed as the passage from a problem to a set 
of problems. The previous section has treated the passage from this problem to 
one of its sub-problems thanks to a restriction operator. In order to consider the 
whole set of possible values for the labeling on a variable, restriction operators 
on a same variable must be grouped together. The union of the environments 
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of the variable (the variable concerned by the labeling) of each sub-problem 
obtained by the application of each of these operators must be a partition of the 
environment of the variable in the initial problem. 

Definition 8. A set {di | 1 < i < n} is a partition of d on x if: 

- Mi, 1 < i < n, d\ v \{ x y C di\ v \{ x }, 

- d\{ x y C Ui<i< n di\{ x }, 

- Vi, j, 1 < i < n, 1 < j < n,i ^ j,di\ {x} nd,| {x} = 0. 

In practice, environment reductions by local consistency operators and label- 
ing arc interleaved to be the most efficient. 

A labeling on x € V can be a complete enumeration (each environment of 
the partition is reduced to a singleton) or a splitting. Note that the partitions 
always verify: Vi, 1 < i < n, di\{ x y ^ 0. 

Example 4. {©| n{PM} U{(PM, I)}, D| n{PM }U{(PM, 2)}, D| n{PM} U{(PM, 3)} 
is a partition of D. □ 

Next lemma ensures that no solution is lost during a labeling step (each 
solution will remains in exactly one branch of the search tree defined later). 

Lemma 3. If t C d is a solution of the CSP and {di \ I < i < n} is a partition 
of d then t C Ui<;<„C£ | (di,L). 

Proof, straightforward. 

Each node of a search tree can be characterized by a quadruple containing the 
environment d (which have been computed up to now), the depth p in the tree, 
the operator / (local consistency operator or restriction operator) connecting 
it with its father and the restricted environment e. The restricted environment 
is obtained from the initial environment when only the restricted operators are 
applied. 

Definition 9. A search node is a quadruple (d 7 e,f,p) with d,e £ V(JS>), f E 
FU{1} andpe IN. 

The depth and the restricted environment allow to localize the node in the 
search tree. 

There exists two kinds of transition in a search tree, those caused by a local 
consistency operator which ensure the passage to one only son and the transi- 
tions caused by a labeling which ensure the passage to some sons (as many as 
environments in the partition). 

Definition 10. A search tree is a tree for which each node is a search step 
inductively defined by: 

- (E>, ©, _L, 0) is the root of the tree, 

- if (d,e,op,p) is a non leave node then it has: 

• ever one son: (d fl f(d), e, f,p+ I) with f G L; 
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• ever n sons: (d fi(d),e fl fi(d),fi,p + 1) with {fi(d) | 1 < i < n} a 
partition of d and fa G R. 



Definition 11. A search tree is said complete if each leaf (d,e,f,p) is such 
that: d = CL I (e,L). 

This section has formally described the computation of solvers in terms of 
search trees. Each branch is an iteration of operators. 



5 Value withdrawal explanations 

This section is devoted to value withdrawal explanations. These explanations 
are defined as trees which can be extracted from a computation. First, rules 
are associated with local consistency operators, restriction operators and the 
labeling process. Explanations are then defined from a system of such rules Jl|. 

From now on we consider a fixed CSP and a fixed computation. The set 
of local consistency operators is denoted by L and the set of restriction opera- 
tors by R. The labeling introduces a notion of context based on the restricted 
environments of the search node. The following notation is used: r h h with 
r C ViO) and h G B. r is named a context. 

Intuitively, r h h means Ve G r, h $ CL J, (e, L U R). A r is an union of 
restricted environments, that is each e£f corresponds to a branch of the search 
tree. If an element h is removed in different branches of the search tree, then a 
context for h may contain all these branches. 



5.1 Rules 

The definition of explanations is based on three kinds of rules. These rules explain 
the removal of a value as the consequence of other value removals or as the 
consequence of a labeling. 

First kind of rule is associated with a local consistency operator. Indeed, such 
an operator can be defined by a system of rules Q . If the type of this operator 
is ( Wi n , W ou t), each rule explains the removal of a value in the environment of 
W ou t as the consequence of the lack of values in the environment of Wi n . 

Definition 12. The set of local consistency rules associated with I G L is: 

r\-hi...r\-h n 

Ki = { | r C V(B),\/d CD,/n,...,/i„^^^ 1(d)} 

Intuitively, these rules explain the propagation mechanism. Using its nota- 



tion, the definition 12 justify the removal of h by the removals of hi, . . . , h n . 



Example 5. Ve G D, the rule 
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{e} h (PM,2) {e} h (PM, 3) 
{e} h (AM, 1) 

is associated with the local consistency operator of type ({PM}, {AM}) (for the 
constraint AM ^ PM). □ 

As said above, the context is only concerned by labeling. So, here, the rule 
does not modify it. Note that if we restrict ourselves to solving by consistency 
techniques alone (that is without any labeling), then the context will always be 
the initial environment and can be forgotten |Q. 

From now on, we consider IZl = U; £ l7?.;. 

The second kind of rules is associated to restriction operators. In this case 
the removal of a value is not the consequence of any other removal and so these 
rules are facts. 

Definition 13. The set of restriction rules associated with r 6 R is: 

1Z r = { | h g r(B),d C r(B)} 

{d} h h 

These rules provide the values which are removed by a restriction. 

Example 6. The set of restriction rules associated with the restriction operator 
r such that Vd <E D, r(d) = D\ v \{pm} U {(PM, 1)} is: 

{ , } with ei C r(D). n 

{ ei }h(PM,2) {ei}h(PM,3) 

This restriction ensures the computation to go in a branch of the search tree 
and must be memorized because future removals may be true only in this branch. 
The context is modified in order to remember that the computation is in this 
branch. 

From now on, we consider TZr = U re nTZ r . 

The last kind of rule corresponds to the reunion of informations coming from 
several branches of the search tree. 

Definition 14. The set of labeling rules for h G D is defined by: 
T 1 hh...r n hh 

n h = { 1 r u ...,r n c v(n)} 

A u . . . u r n h h 

Intuitively, if the value h has been removed in several branches, corresponding 
to the contexts fi, . . . ,T ni then a unique context can be associated to h: this 
context is the union of these contexts. 

{ ei } h (MP, 2) {e 2 } h (MP, 2) {e 3 } h (MP, 2) 

Example 7. For all ei,e2,e3 G D, is 

{ei}u{e 2 }U{e 3 } h (MP, 2) 

a labeling rule. 

From now on, we consider 1Z® = UhenTZh- 

The system of rules TZlU TZr U IZo can now be used to build explanations of 
value withdrawal. 
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5.2 Proof trees 

In this section, proof trees are described from the rules of the previous section. 
It is proved that there exists such a proof tree for each element which is removed 
during a computation. And finally, it is shown how to obtain these proof trees. 

Definition 15. A proof tree with respect to a set of rules IZl U TZr U TZ-g is a 
finite tree such that, for each node labeled by r h h, if B is the set of labels of 
its children, then 



Next theorem ensures that there exists a proof tree for each element which 
is removed during a computation. 

Theorem 1. r h h is the root of a proof tree if and only if^e^L,h^CL\ 



Proof. =>: inductively on each kind of rule: 

— for local consistency rules, if Vi, 1 < i < n,hi ^ CL J. (e.;,i?) then hi ^ 
CL I (ei n . . . fl e n , R) and so (because h <— {hi, . . . , h n } G TZ) h ^ CL J. 
({e 1 n...ne n },R); 

— for restriction rules, h ^ e so h ^ CL j (e, i?); 

— straightforward for labeling rules. 

if Vi, 1 < i < n, h £ CL j (e^, R) then (||) there exists a proof tree rooted 
by h for each e^. So, with context notion, Vi, 1 < i < n, {ei} h ft, is the root of 
a proof tree. Thus, thanks to the labeling rule, {ei, . . . , e n } h h is the root of a 
proof tree. 

Last part of the section is devoted to show how to obtain these trees from a 
computation, that is from a search tree. 

Let us recall that cons(/i, T) is the tree rooted by h and with the set of sub- 
trees T. The traversal of the search tree is in depth first. Each branch can then be 
considered separately. The descent in each branch can be viewed as an iteration 
of local consistency operators and restriction operators. During this descent, 
proof trees are inductively built thanks to the rules associated to these two kind 
of operators (labeling rules are not necessary for the moment). Each node being 
identified by its depth, the set of trees associated to the node (d p ,e p , f p ,p) is 
denoted by S p l- 

These sets are inductively defined as follows: 



B 



rhh 



(e,R). 



- S°i= 0; 

- if fp+i G R then: 

S p+i 1= gpj_ u{ C ons({e p } h h,T) \ T C S p [ , h G d. 



{root(i) \teT} 



e% P+1 } 



{e p } h h 
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— if fp+i G L then: 

S p+i 1= gPl u{cons({e p+1 } h ft,0) | h e d p> E TZ fp+1 } 

{e p+ i} h ft 

To each node (d,e,f,p) is then associated a set of proof tree denoted by 
Si (d,e,f,p). 

A second phase consists in climbing these sets to the root, grouping together 
the trees rooted by a same element but with different contexts. To each node 
(d, e, f,p) is associated a new set of proof trees S\ (d,e, f,p). This set is induc- 
tively defined: 

- if (d,e,f,p) is a leaf then ST (d,e,f,p) = S| (d,e,f,p); 

- if ZeLthenST (d,e,f,p) = S{ (dUl(d),e,l,p + l); 

— if {ri(d) | 1 < i < n} is a partition of d then SI (d, e,f,p) — S U S' with 
S = Ui<i<„ST (dn ri(d), e n rj(c),ri,p+ 1) and 

{root(t) |ter} 

5' = {cons(r h ft, T) | e Tin, T C 5}. 



Corollary 1. If the search tree rooted by (D,D, _L,0) is complete then {root(t) 
t S ST (B,D,_L,0)} = {r h ft | Ve e r,ft ^ CL | (e,i)}. 

Proof, by theorem 0. 

These proof trees are explanations for the removal of their root. 

Example 8. An explanation for the withdrawal of the value 2 from the domain 
of MP can be: 



{ei}h(PM,2) {ei} h (PM,3) 



{ei}h(AM,l) {e 2 }r-(PM,l) {e 3 }r-(PM,l) 



{ ei }h(MP,2) (e 2 }h(MP,2) {e 3 }h(MP,2) 



{ei} U {e 2 } U {e 3 } r- (MP, 2) 

with ei, ei and e^ such that: 

- ex = n\ v \{PM} U {(PM, 1)} 

- e 2 =D| n{FM }U{(PM,2)} 

- e 3 =D| n{PM} U{(PM,3)} 

This tree must be understood as follows: the restriction of the search space to 
e\ eliminates the values 2 and 3 of PM. Since AM ^ PM, the value 1 is removed 
of AM. And since MP > AM, the value 2 is removed of MP. In the same way, 
the value 2 is also removed of MP with the restriction e 2 and e%. And finally, 
the root ensures that this value is removed in each of these branches. □ 
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The size of explanations strongly depends on the consistency used, the size of 
the domains and the type of constraint. For example, if all the local consistency 
operators are defined from equality constraints with arc-consistency, the size of 
explanations will be minimal. On the opposite side, if all local consistency oper- 
ators are defined from inequality constraints including more than two variables, 
their size will be maximal. Note that even if the width of explanations is large, 
their height remains correct in general. It is important to recall that these ex- 
planations are a theoretical tool. So, an implementation could be more efficient. 
It is possible for example to group together values of a same variable which are 
removed by the same reason. 

6 Interest for Programming Environments 

The understanding of solvers computation provided by the explanations is an in- 
teresting source of information for constraint (logic) programming environments. 
Moreover, explanations have already been used in several ones. The theoretical 
model of value withdrawal explanation given in the paper can therefore be an 
interesting tool for constraint (logic) programming environments. 

The main application using explanations concerns over-constrained problems. 
In these problems, the user is interesting in information about the failure, that 
is to visualize the set of constraints responsible for this failure. He can therefore 
relax one of them and may obtain a solution. 

In the PaLM system, a constraint retraction algorithm have been imple- 
mented thanks to explanations. Indeed, for each value removed from the en- 
vironment, there exists an explanation set containing the operators responsi- 
ble for the removal. So, to retract a constraint consists in two main steps: to 
re-introduce the values which contain an operator associated to the retracted 
constraint in their explanation, and to wake up all the operators which can re- 
move a re-introduced value, that is which are defined by a rule having such a 
value as head. The theoretical approach of the explanations have permitted to 
prove the correctness of this algorithm based on explanations. There did not 
exist any proof of it whereas the one we propose is immediate. Furthermore, this 
approach have proved the correctness of a large family of constraints retraction 
algorithms used in others constraints environments and not only the one based 
on explanations. 

The interest for explanations in debugging is growing. Indeed, to debug a 
program is to look for something which is not correct in a solver computation. 
So, the information about the computation given by the explanations can be 
very precious. 

They have already been used for failure analysis. In constraint programming, 
a failure is characterized by an empty domain. A failure explanation is then a 
set of explanations (one explanation for each value of the empty domain) . Note 
that in the PaLM system, labeling has been replaced by dynamic backtracking 
based on the combination of failure explanation and constraint retraction. 
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An interesting perspective seems to be the use of explanations for the declar- 
ative debugging of constraint programs. Indeed, when a symptom of error (a 
missing solution) appears after a constraint solving, explanations can help to 
find the error (the constraint responsible for the symptom). For example, if a 
user is expected a solution containing the value v for a variable x but does not 
obtain any such solution, an explanation for the removal of (x, v) is a useful 
structure to localize the error. The idea is to go up in the tree from the root (the 
symptom) to a node (the minimal symptom) for which each son is correct. The 
error is then the constraint which ensures the passage between the node and its 
sons. 

The theoretical model given in the paper will, I wish, bring new ideas and 
solutions for the debugging in constraint programming and other environments. 

7 Conclusion 

The paper was devoted to the definition of value withdrawal explanations. The 
previous notions of explanations (theoretically described in |M]) only dealt with 
domain reduction by local consistency notions. Here, the notion of labeling have 
been fully integrated in the model. 

A solver computation is formalized by a search tree where each branch is 
an iteration of operators. These operators can be local consistency operators or 
restriction operators. Each operator is defined by a set of rules describing the 
removal of a value as the consequence of the removal of other values. Finally, 
proof trees are built thanks to these rules. These proof trees are explanations 
for the removal of a value (their root) . 

The interest in explanations for constraint (logic) programming environment 
is undoubtedly. The theoretical model proposed here have already validate some 
algorithms used in some environments and will, I wish, bring new ideas and solu- 
tions for constraint (logic) programming environments, in particular debugging 
of constraint programs. 
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